[Geoserver-devel] [JIRA] (GEOS-10038) Incorrect login URL when using "Proxy Base URL" settings with " Use headers for Proxy URL"

GeoServer GeoServer Developer
1

John Kristensen created an issue

GeoServer / BugGEOS-10038

Incorrect login URL when using “Proxy Base URL” settings with " Use headers for Proxy URL"

Issue Type:

BugBug

Affects Versions:

2.19.0

Assignee:

Unassigned

Created:

27/Apr/21 11:28 AM

Priority:

MediumMedium

Reporter:

John Kristensen

I’m running Geoserver behind a reverse proxy and have set the “Proxy Base URL” settings to something like

https://geoserver.example.com/geoserver

which generate a login form with the following tag:

<form style="display: inline-block;" method="post" action="https://geoserver.example.com/geoserver/j_spring_security_check">

However if I tick the “Use headers for Proxy URL” setting, then the login form is generated with the following tag:

<form style="display: inline-block;" method="post" action="http://localhost:8080/geoserver/j_spring_security_check">

Usually this wouldn’t be a problem when using a “static” Proxy Base URL, but I would like to use a “dynamic” Proxy Base URL like

https://${X-Forwarded-Host}/geoserver

As best as I can tell the problem seems to be in the mangleURLHeaders method and its check for OWS requests (see: https://github.com/geoserver/geoserver/blob/main/src/main/src/main/java/org/geoserver/ows/ProxifyingURLMangler.java#L149 )

Commenting out that check seems to resolve the problem, but I’m not very familiar with the codebase, so have not idea what other side-effects removing it would cause.

Add Comment

Add Comment

Get Jira notifications on your phone! Download the Jira Cloud app for Android or iOS

This message was sent by Atlassian Jira (v1001.0.0-SNAPSHOT#100157-sha1:76eb1b6)

Atlassian logo